Solaris 10 Patch 137097-01 Symlink Attack Privilege Escalation

No description provided by source. Source: http://www.securityfocus.com/bid/54919/info Solaris 10 Patch 137097-01 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges on affected computers. !/usr/bin/perl $clobber = /etc/passwd...

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation source: https://www.securityfocus.com/bid/54919/info Solaris 10 Patch 137097-01 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges on affected computers. !/usr/bin/per...

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation

source: https://www.securityfocus.com/bid/54919/info Solaris 10 Patch 137097-01 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges on affected computers. !/usr/bin/perl $clobber = "/etc/passwd"; while1 open ps,"ps -ef | grep ...

Solaris 10 Patch 137097-01 Symlink Attack Privilege Escalation

Exploit for solaris platform in category local exploits Larry W. Cashdollar 8/6/2012 Here is another symlink attack with temp file creation using process id in Solaris 10 patch cluster. You can over write the contents of root owned files with the contents of inetd.conf. In...